Extracted

• • Target
    TSPO0001978-xlxs.exe
  • Size 224KB
  • SHA256 8d96cdba8c8ac7896773c03f0ab27a5cebe912d9cc6614fda1e149191fc6a7c7
  • MD5 692bd89d8f8c658c6e2082c86e47dc2b
  • SHA1 087abc5ead15c9ef40cbfb0dfd3a8aace808d77f
  • SHA512 5a668c193f2aeba3eb1ce1b2371c669e0e6791920ac329525d731ea34fd62400fb40ccb3eca7770b606c05fea637006c45f34b50060b5ab34d987c7b50479555
  • MD5 SHA1 SHA512

  Score

  10^/10

  xloaderloaderrat

  • Xloader

    Xloader is a rebranded version of Formbook malware.

    loaderxloader

  • Xloader Payload

    rat

  • Deletes itself

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2